“ You’ll never find rainbows if you’re looking down.” – Charlie Chaplin
March 28 2025
VMware Tanzu Product Releases
In this section, we will add releases information on Tanzu Platform for Cloud Foundry, Tanzu Data Solutions, and Tanzu Spring Essentials Products that are part of Tanzu Platform and Standalone solutions along with its release date and release notes. (Note : Broadcom Support portal requires you to register)
Tanzu Product Downloads | KB article on How to Download Products | Tanzu Product Lifecycle (Select Tanzu Division to find Tanzu product releases) | Tanzu Product Documentation
| Product Name | Version | Release Date | Related Links |
| VMware Tanzu Platform Stemcells (Ubuntu Jammy) Stemcells (Ubuntu Jammy FIPS) Stemcells (Ubuntu Jammy Azure Light) Check Release Notes for details | 1.803 1.803 1.803 | 2025-03-24 | Release Notes |
| Stemcells (Windows) Check Release Notes for details. | 2019.84 | 2025-03-26 | Release Notes |
| Tanzu Platform for Cloud Foundry (TPCF or TAS) Features and Bug Fixes addressed. Check Release Notes for details | 10.0.4 6.0.14+LTS-T 4.0.34+LTS-T | 2025-03-25 | Release Notes Release Notes Release Notes |
| Tanzu Platform for Cloud Foundry Windows (TAS for Windows) Features and Bug Fixes addressed. Check Release Notes for details | 10.0.4 6.0.14+LTS-T 4.0.34+LTS-T | 2025-03-24 | Release Notes Release Notes Release Notes |
| Tanzu Platform for Cloud Foundry Isolation segment (ISO) Features and Bug Fixes addressed. Check Release Notes for details | 10.0.4 6.0.14+LTS-T 4.0.34+LTS-T | 2025-03-25 | Release Notes Release Notes Release Notes |
| VMware Tanzu Data Solutions VMware Tanzu GemFire JDK 21 Support and fixes for security issues.Check Release Notes for details | 10.1.3 | 2025-03-21 | Release Notes |
| VMware Tanzu Greenplum Command Center minor release that resolves several issues. Check Release Notes for details | 7.3.1 6.13.1 | 2025-03-24 | Release Notes Release Notes |
VMware Tanzu Product Security Updates
Within the release notes there may be security or governance specific updates that are worth highlighting. The Tanzu Security team reviews each release and summarizes security or governance specific highlights found within the release notes.
Tanzu Security Team Disclaimer:
The summary below is a review of the above product release notes from a security and governance point of view and may not reflect specific security or governance requirements you may require. It also does not include all details from the release notes. Please review the full release notes for release details.
VMware Tanzu Platform
Stemcells (Ubuntu Jammy) , Stemcells (Ubuntu Jammy FIPS) & Stemcells (Ubuntu Jammy Azure Light)
- USN-7352-1 – FreeType – Resolved 1 medium CVE
- USN-7357-1 – Libxslt – Resolved 1 medium CVE
- Stemcell version 1.803 resolved vulnerabilities since 1.785
- 70 Low
- 1474 Medium
- 56 High
- 8 Critical
Stemcells (Windows)
- Works with Microsoft Security Updates Patch Tuesday March 11th, 2025
- The Windows Defender feature has been removed. Previously, it was only disabled.
Tanzu Platform for Cloud Foundry (TPCF or TAS)
- Gorouter respects new X-CF-PROCESS-INSTANCE header for routing to specific app processes
- Bumped release for binary-offline-buildpack, capi, cf-autoscale, cf-networking, cflinux4, credhub, dotnet-core-offline-buildpack, go-offline-buildpack, java-offline-buildpack, nginx-offline-buildpack, nodejs-offline-buildpack, notifications-ui, php-offline-buildpack,push-apps-manager-release, push-usage-service-release, pxc, python-offline-buildpack, routing, ruby-offline-buildpack, static-offline-buildpack, uaa
- Read the release notes for a full list of CVEs patched in these releases:
| 10.0.4 | 6.0.14+LTS-T | 4.0.34+LTS-T |
| Low: 2 | Low: 2 | Low: 2 |
| Medium: 25 | Medium: 25 | Medium: 24 |
| High: 50 | High: 50 | High: 49 |
| Critical: 10 | Critical: 10 | Critical: 10 |
Tanzu Platform for Cloud Foundry Windows (TAS for Windows)
- No CVEs were fixed in each Tanzu Platform for Cloud Foundry [Windows] component since the previous patch version of Tanzu Platform for Cloud Foundry [Windows].
- Bump windowsfs-release to version 2.80.0
Tanzu Platform for Cloud Foundry Isolation segment (ISO)
- Bumped release of cf-networking, cflinux4, routing
- Resolved the following vulnerabilities:
- cf-networking CVE-2025-22866 (high)
- routing GHSA-mh63-6h87-95cp (high)
- silk CVE-2025-22866 (high)
VMware Tanzu Data Solutions
VMware Tanzu GemFire
- Tanzu Gemfire 10.1.3 includes JDK 21 support
- Tanzu GemFire 10.1.3 includes fixes for the following security issues also found in release advisory:
- DOMPurify: CVE-2024-47875, CVE-2024-45801, CVE-2025-26791
- Jetty: CVE-2024-8184, CVE-2024-6763
- Netty: CVE-2024-47535
- Tokens are now redacted in the same way passwords are.
- When max-thread is not set on the server, the default idle thread timeout is changed from 0 seconds to 30 minutes.
- Fixes a file descriptor leak when a TLS handshake times out.
- Changes the default socket-lease-time from 30 minutes to 1 minute.
- Fixes Offheap memory allocation for JDK 21.
VMware Tanzu Greenplum Command Center
- Tanzu Greenplum command center 7.3.1 & 6.13.1 are a minor release that resolves several issues.
- Resolves an issue where XSRF token was not set on first API call, and refreshing the page was a workaround.
- Tanzu Greenplum command center 7.3.1 & 6.13.1 updated underlying libraries to address the following security vulnerabilities:
Check out the troubleshooting Tips and Resolutions on various Tanzu Products. This section is a great resource for you to bookmark and quickly prevent issues before pushing applications to Production.
VMware Tanzu Application Service (TAS)
How to Improve ‘ cf push’ Performance When Deplyoing Applications to Diego Cells – There are numerous factors that can affect ‘cf push’ operations. Check the article for details.
VMware Tanzu Kubernetes Grid Integrated Edition (TKGI)
How storage is allocated to the kubelet and containerd in TKGI – This article a starting point for TKGI administrators to begin troubleshooting storage related issues with the kubelet and containerd components, specifically within TKGI.
Cannot change private registry configuration again after configuring it once via the CLI – An issue have been discovered in the process where during processing the changes the manifest is not populated with the updated settings. Check additional information in this article.
VMware Tanzu GemFire
Tanzu GemFire Sizing: Disk, CPU, and Network Considerations (Blog) Arnab Chakraborty, Charlie Black Welcome to the last blog in our series about VMware Tanzu GemFire sizing and explore disk sizing, CPU provisioning, and network performance. In our previous two blogs we covered how to get started with GemFire sizing, and redundancy strategies, and the importance of maintaining free capacity.
Spring Updates
This Week in Spring – March 25th, 2025 (Blog) Josh Long shares about huge changes to the organization and arrangement of Spring AI and more
Cloud Foundry Weekly Series – Subscribe | RSS Feed
I ain’t afraid of no CVEs! : Cloud Foundry Weekly: Ep 51 – (Video) Nick Kuhn Nicky Pike This week guests – DMZ, Nishad, and Rajan will join the show to discuss how Team Tanzu proactively handles the ever-changing security landscape by implementing proactive practices to respond to and mitigate the CVE threat landscape.
Upcoming Events and Webinars sorted in Date order below for your convenience with relevant links and information for you to not miss these key happenings.
What’s new in VMware Tanzu RabbitMQ 4.1 | April 30, 2025 | 10am PST
What’s new in VMware Tanzu RabbitMQ 4.1 – Register Now – Six months after the major Tanzu RabbitMQ 4.0 release, join Howard Twine for a webinar exploring new features in v4.1, including enhanced AMQP, streaming, and a revamped Scheduled/Delayed messaging plugin.
GenAI and Agentic Training for Tanzu Platform May 13, 2025
Platform Engineering Skills for GenAI and Agentic Training Workshop May 13 at VMware – Palo Alto campus, Tanzu team will be hosting an all day Tanzu AI Workshop and its free. Please Register for this.
Cloud Foundry Day North America on May 14, 2025
The community event will be hosted in the gym of the VMware Palo Alto campus and the Tanzu team will be speaking in 12 sessions during the event! Here is the link to get more information and register for the conference. Tickets for CF Day are only $50. You need to register for this separately.
The Spring Developer Conference May 21 – 23 Barcelona
2025 Spring I/O Developer Conference Register Today Spring I/O 2025 will take place in the beautiful city of Barcelona. Join the Spring community from around the world. Session Info Workshop Info
Tanzu What’s New Series – Weekly Tanzu digest on Tanzu product Releases, KB Articles, Success Stories, Updates, Blogs, Videos & More – You can also Subscribe for this weekly update on the official VMWare Tanzu Linked In Newsletter Now!!!! We now have 11k + subscribers and growing!!
Tanzu Academy – An on-demand, comprehensive learning hub for platform and application operators to become experts at achieving meaningful outcomes with Tanzu products. Updated VMware Tanzu Platform for Cloud Foundry lab updated with version 10
Tanzu Fundamentals (Videos)
Tanzu Webinars – New home
Tanzu Blogs – All Tanzu blogs will be here
Spring by VMware Tanzu Blog – Find all Spring updates, events, podcasts and more | Spring Office Hours
Spring Academy – The new Spring Academy Pro FREE is live! Check out the details here
Tanzu Documentation – Tanzu Platform | Tanzu Data Solutions | Tanzu Platform Services | Tanzu Spring | Tanzu Standalone Components | Reference Architectures
Tanzu Hands on Labs (HOL) – Self Paced Labs to try hands on Tanzu Products
Can’t get enough? Get weekly updates when you subscribe to our LinkedIn newsletter and RSS Feed.
